Popular Services

Social

How to register for DUO Two-Factor Authentication?

We strongly recommend registering more than one device. This will ensure that you
have easy access to multiple authentication methods in the event that you do not have
access to your primary device.

What is Duo?

Duo is a two-factor authentication solution supporting the security of personal and
university data for campus community members. Two-factor authentication is a method
of confirming your identity using two separate elements: 1) Something you know (your
NetID password), and 2) something you have (your registered mobile device or landline
phone).

Duo provides an extra layer of security for your NetID, designed so that no one but
you can access your account, even if your password becomes compromised. You will be
prompted to authenticate through Duo each time you log-in to Duo compatible services.

The service provides multiple options for taking advantage of this additional authentication
method, including push notifications through a smartphone app, short codes delivered
through the app, or phone calls.

Why does KSU need Duo?

Passwords are increasingly easy to compromise. The 2018 Verizon Data Breach Investigations
Report lists “Use of stolen Credentials” as the #1 top action contributing to organizational
breaches and email phishing as #3. The institution receives thousands of malicious
emails daily and, although most are routed to a user’s junk folder or blocked, some
are delivered and trick the recipient to disclose their NetID password. At KSU, 80%
of phishing attacks utilize compromised KSU credentials and as these attacks have
gotten more complex, the effectiveness of passwords alone has eroded to the point
of being inadequate to protect the data to which the institution is entrusted.

Two-factor authentication is required and actively used by the University System of
Georgia and member institutions. It adds a second layer of security, keeping your
account secure even if your password is compromised. With Duo Push, you’ll be alerted
right away (on your phone) if someone is trying to log in to your account. This second
factor of authentication is separate and independent from your username and password—
Duo never sees your password.